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REMARKS 

Please reconsider the application in view of the above amendments and the following 
remarks. Applicants thank the Examiner for carefully considering this application and for 
indicating that the drawings filing on June 26, 2003 are accepted. 

Disposition of Claims 

Claims 1-29 are currently pending in this application. Claims 1, 9, 16, and 24 are 
independent. Claims 2, 10, 15, and 17 are canceled in this reply. The remaining claims depend, 
directly or indirectly, from claims 1,9, 16, and 24. 

Claim Amendments 

Independent claims 1, 9, and 16 are amended to include subject matter from dependent 
claims 2, 10, and 17, respectively. Claims 1,9, 16, and 24 are amended to include limitations 
directed to a policy definition that governs access to a resource. Specifically, the amended 
independent claims state that a request to access a resource is intercepted, the resource is located 
within a hierarchical structure, and the resource is associated with a policy definition that 
includes a rule, a condition, a subject, and a referral. Applicant asserts that no new subject 
matter is added by way of these amendments as support for these claim amendments may be 
found, for example, on pages 8-1 1 and 15-16 of the Specification. 

Rejections under 35 U.S.C. § 103 

To establish a prima facie case of obviousness, under 35 U.S.C. § 103(a), "the prior art 
reference (or references when combined) must teach or suggest all the claim limitations." See 
MPEP §2143.03. Further, "all words in a claim must be considered in judging the patentability 
of that claim against the prior art." See MPEP § 2143.03. 
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Claims 1, 3, 4, 8, 9, 1 1, 15, 16, 18, 19, and 23 stand rejected under 35 U.S.C. § 103(a) as 
being unpatentable over U.S. Publication No. 2002/0186238 ("Sylor") in view of European 
Patent Application EP1009130A1 ("Brun"). To the extent that this rejection may still apply to 
the amended claims, this rejection is respectfully traversed. 

Applicants respectfully assert that the references, when combined, fail to teach or 
suggest all the claim limitations of amended independent claims 1, 9, and 16. Amended 
independent claim 1 recites, in part, intercepting a request identifying a resource; and traversing 
said hierarchical organization to locate said resource, wherein said resource is subject to a policy 
definition governing access to said resource, wherein the policy definition comprises: a rule that 
references said resource and comprises at least one action associated with the resource, a 
condition that comprises a constraint on the at least one action, a subject that defines a collection 
of users to whom the policy definition applies, and a referral that comprises an identification of 
a second policy decision point to which the evaluation of the policy definition is being 
delegated. Amended independent claims 9 and 16 recite similar limitations. 

Sylor is directed to displaying the status of networked resources. See Sylor, Abstract. 
The system of Sylor presents the user with a GUI that includes a visual hierarchy of resources, 
communicates with a web server to access status information of the resources, and 
communicates with analysis tools to enable drilldown lists for resource profiles. See Sylor, 
paragraph [0161]. While Sylor may disclose receiving requests related to the resources in the 
GUI from a user, Sylor does not teach or suggest intercepting a request identifying a resource. 
The plain meaning of "intercepting" is "to interrupt the progress or intended course of." See, 
e.g., The American Heritage® Dictionary of the English Language, as cited at 
hattp://www.bartleby.com. The requests made by a user in Sylor are intended to be received by 
the GUI, and thus are not intercepted. 
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Further, Sylor fails to teach or suggest a policy definition containing a rule, a subject, a 
condition, and a referral, as recited in amended independent claims 1, 9, and 16. In fact, Sylor 
does not define any type of policy definition governing access to resources. Rather, Sylor is 
only concerned with providing users with the status and profiles of resources, and is completely 
silent as to how access to resources is permitted. 

Further, Brun fails to supply that which Sylor lacks. Brun relates to locating a network 
resource in a packet switching network connected to subnetworks. Brun discloses receiving a 
query message comprising a resource name, where the resource name includes a prefix, and 
comparing the resource name prefix with prefixes stored in a database to determine whether the 
resource name relates to a resource that belongs to an access subnetwork. See Brun, col. 15, 11. 
45-57. Although Brun organizes and locates resources, Brun fails to teach or suggest 
intercepting a request identifying a resource. As explained above, the plain meaning of 
"intercepting" is "to interrupt the progress or intended course of." Brun merely receives a query 
message, which is not equivalent to intercepting the query message. See Brun, col. 8, 11. 41-43. 

In addition, Brun fails to disclose or suggest a policy definition that includes the 
elements recited in amended independent claims 1, 9, and 16. For example, Brun is completely 
silent with respect to a condition that constrains on action to be performed on a resource, where 
the condition is included within a policy decision that determines whether access to a particular 
resource is permitted. 

Moreover, Brun does not teach or suggest a referral included within a policy definition, 
where the referral indicates that the policy definition is to be evaluated by a second policy 
decision point. Brun merely discloses forwarding a query message to an adjacent access border 
node. See Brun, col. 8, 11. 54-57. Further, the query message in Brun is simply forwarded based 
on matching the resource name to a resource, not by locating within the query message 
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information that indicates where to forward the query message. See Brun, col. 8, 11. 54-57. 
Finally, a border node cannot be a policy decision point as the query message is not evaluated 
by the access border node in any way. 

In view of the above, amended independent claims 1, 9, and 16 are clearly patentable 
over Sylor and Brun, whether considered separately or in combination. Further, dependent 
claims 3, 4, 8, 11, 15, 18, 19, and 23 are patentable for at least the same reasons. Accordingly, 
withdrawal of this rejection is respectfully requested. 

Claims 2, 10, 17, and 24 stand rejected under 35 U.S.C. § 103(a) as being unpatentable 
over Sylor, Brun, and further in view of US Publication No. 2004/0213258 ("Ramamoorthy"). 
To the extent that this rejection may still apply to the amended claims, this rejection is 
respectfully traversed. 

As described above, Sylor and Brun fail to render the amended independent claims 1, 9, 
and 16 obvious. Independent claim 24 has been amended to recite subject matter similar to that 
of independent claims 1, 9, and 16. Therefore, independent claim 24 is patentable over Sylor 
and Brun for at least the same reasons described above. Further, Ramamoorthy fails to supply 
that which Sylor and Brun lack, as evidenced by the fact that the Examiner relies on 
Ramamoorthy solely for the purpose of disclosing that resources are associated with access 
policies and that requestors are inherently checked for access privileges. {See Office Action 
mailed September 1, 2006, page 12. 

Thus, Sylor, Brun, and Ramamoorthy, whether considered separately or in combination, 
clearly fail to render independent claims 1, 9, 16, and 24 obvious. Dependent claims 2, 10, and 
17 are patentable for at least the same reasons. Accordingly, withdrawal of this rejection is 
respectfully requested. 
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Claims 5, 6, 12, 13, 20, 21, 25, and 26 stand rejected under 35 U.S.C. § 103(a) as being 
unpatentable over Sylor in view of Brun, and further in view of U.S. Publication No. 
2004/0128615 ("Carmel"). To the extent that this rejection may still apply to the amended 
claims, this rejection is respectfully traversed. 

As described above, Sylor and Brun fail to render amended independent claims 1, 9, 16, 
and 24 obvious. Further, Carmel fails to supply that which Sylor and Brun lack, as evidenced by 
the fact that the Examiner relies on Carmel solely for the purpose of disclosing indexing and 
querying documents, where context delimiters are used for both indexing and querying into 
documents, and for disclosing receiving information for wildcard pattern matching of resource 
names. See Office Action mailed September 1, 2006, page 13. Thus, Sylor, Brun, and Carmel, 
whether considered separately or in combination, clearly fail to render independent claims 1, 9, 
16, and 24 obvious. Dependent claims 5, 6, 12, 13, 20, 21, 25, and 26 are patentable for at least 
the same reasons. Accordingly, withdrawal of this rejection is respectfully requested. 

Claims 7, 14, 22, and 27 stand rejected under 35 U.S.C. § 103(a) as being unpatentable 
over Sylor, Brun, and U.S. Patent No. 6,026,440 ("Shrader"). To the extent that this rejection 
may still apply to the amended claims, this rejection is respectfully traversed. 

As described above, Sylor and Brun fail to render amended independent claims 1,9, 16, 
and 24 obvious. Further, Shrader fails to supply that which Sylor and Brun lack, as evidenced 
by the fact that the Examiner relies on Shrader solely for the purpose of disclosing receiving 
information indicating whether a resource name is case-sensitive. See Office Action mailed 
September 1, 2006, page 14. 

Thus, Sylor, Brun, and Shrader, whether considered separately or in combination, clearly 
fail to render independent claims 1,9, 16, and 24 obvious. Dependent claims 7, 14, 22, and 27 
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are patentable for at least the same reasons. Accordingly, withdrawal of this rejection is 
respectfully requested. 

Claim 28 stands rejected under 35 U.S.C. § 103(a) as being unpatentable over Sylor in 
view of Brun and further in view of Ramamoorthy and U.S. Patent No. 5,544,322 ("Cheng"). 
To the extent that this rejection may still apply to the amended claims, this rejection is 
respectfully traversed. 

As described above, Sylor, Brun, and Ramamoorthy fail to render amended independent 
claim 1 obvious. Further, Cheng fails to supply that which Sylor, Brun, and Ramamoorthy lack, 
as evidenced by the fact that the Examiner relies on Cheng solely for the purpose of disclosing 
referring a request for access to a resource to another policy decision point. See Office Action 
mailed September 1, 2006, page 15. Further, Cheng fails to disclose or suggest a policy decision 
point that is capable of evaluating policy decisions regarding access to the resource. Rather, 
Cheng discloses that the policy decision is forwarded to a database (i.e., which cannot make a 
determination regarding authentication for web server resources). See Cheng, col. 6, 11. 55-59. 
The database disclosed in Cheng basically processes an authentication announcement, but does 
not work for general web server resources that do not perform authentication announcements. 

Thus, it is clear that Sylor, Brun, Ramamoorthy, and Cheng, whether considered 
separately or in combination, fail to render independent claim 1 obvious. Dependent claim 28 is 
patentable for at least the same reasons. Accordingly, withdrawal of this rejection is respectfully 
requested. 

Referring to claim 29, the Examiner takes Official Notice that a cache for subsequent 
requests/processes is notoriously well known in the art. See Office Action mailed September 1, 
2006, page 16. Applicants respectfully note that the Examiner did not provide evidence to 
support the position that cache policy decisions related to access control of resources is well 
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known in the art, as requested in the previously filed Request for Continued Examination. Thus, 
Applicants again request that the Examiner provide evidence to support this position either in 
the form of prior art or by providing a declaration of personal knowledge pursuant to 37 C.F.R. 
§ 1.104 (d)(2). Applicants respectfully assert that caching of such policy decisions, made by 
policy decision points for controlling access to resources is not well known in the art. 
Accordingly, favorable consideration of dependent claim 29 is respectfully requested. 
Conclusion 

Applicants believe this reply is fully responsive to all outstanding issues and places this 
application in condition for allowance. If this belief is incorrect, or other issues arise, the 
Examiner is encouraged to contact the undersigned or his associates at the telephone number 
listed below. Please apply any charges not covered, or any credits, to Deposit Account 50-0591 
(Reference Number 03226/497001). 

Dated: December I, 2006 Respectfully submitted, 




Robert P. Lord 
Registration No.: 46,479 
OSHA • LIANG LLP 
1221 McKinney St., Suite 2800 
Houston, Texas 77010 
(713) 228-8600 
(713) 228-8778 (Fax) 
Attorney for Applicant 
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